Debian Patches

Status for qbittorrent/5.1.0-2

Patch Description Author Forwarded Bugs Origin Last update
02_fix-WEBUI.patch [PATCH] WebAPI: Trim leading whitespaces on Run External Program fields

Hacked qbt instances may contain malicious script placed in Run External Program and the script
will attempt to hide itself by adding a lot whitespaces at the start of the command string.
Users may mistake the field of being empty but is actually not.
So trim the leading whitespaces to easily expose the malicious script.

Note that GUI already trim the fields and only WebAPI doesn't trim them. This patch will unify
the behavior.
Chocobo1 <Chocobo1@users.noreply.github.com> no 2025-06-30
01_fix-RSS-and-search.patch [PATCH] Prevent opening local files if web page is expected "Vladimir Golovnev (Glassez)" <glassez@yandex.ru> no 2025-06-23

All known versions for source package 'qbittorrent'

Links